McAfee EPOLICY ORCHESTRATOR 4.5 - Installationsanleitung PDF herunterladen (Seite 72)

As systems are decommissioned, or disappear because of extended travel, users on leave, or other

reasons, remove them from the System Tree. Removing these systems ensures the reports you run

are returning data on systems that have recently communicated with the McAfee ePO server, not

outdated systems that have not communicated in weeks. An example of a skewed report might be

your DAT report on compliance. If you have systems in your System Tree that have not reported into

the McAfee ePO server for 20 days then they appear as out of date by 20 days and ultimately skew

your compliance reports.

You can of course create a query and report to filter out systems that have not communicated with the

McAfee ePO server in X number of days but it is more efficient to either delete or automatically move

these systems. Most organizations choose a number between 14 and 30 days of no communication to

delete or move systems. For example, if a system has not communicated with the McAfee ePO server

you can delete or move that system to a group in your tree that you can designate as Inactive Agents.

There is already a preconfigured task that is disabled by default that you can edit and enable on your

server.

Edit and enable the Inactive Agent Cleanup server task.

Click Menu | Automation | Server Tasks and click Edit for the Inactive Agent Cleanup Task for 4.5 in the

Action column. The Server Task dialog box appears.

If needed, change the name, click Enabled next to Schedule status, and click Next. The Actions dialog

box appears.

You can see this server task uses an action on the results of a query called Managed Inactive

Agents and whatever systems are returned from that query are deleted according to the subaction.

See Changing the Managed Inactive Agents query for details.

Do not click the checkbox to Remove agent.

The Remove agent setting causes ePolicy Orchestrator to delete the McAfee Agent from the inactive

systems when they are removed from the System Tree. Without the agent installed, when the

removed system reconnects to the network it cannot automatically start communicating with the

McAfee ePO server and reinserts itself back into the System Tree.

Using Client and Server tasks in your managed environment

Server tasks

McAfee

ePolicy Orchestrator

Best Practices Guide for use with ePolicy Orchestrator versions 4.5.0 and 4.0.0

1 2 ... 67 68 69 70 71 72 73 74 75 76 77 ... 109 110

Keine Kommentare

McAfee EPOLICY ORCHESTRATOR 4.5 - Installationsanleitung Seite 72